HTTPS Watch

This page provides details of HTTPS usage for websites operated by NSDL. If they support HTTPS (and they should!), this page lists their grades from Qualys SSL Labs Server Test. Issues that prevent the site from obtaining an A grade are also listed.

Toggle shown/ hidden columns: [show]

Site overview and test details: IP Address - Test date - Status message - Industry - Host purpose - HTTPS behavior - Issue report
Issues capping grade to F: Vulnerable to Heartbleed - Vulnerable to CVE-2014-0224 - Vulnerable to CVE-2016-2107 - Vulnerable to FREAK - Vulnerable to Logjam - Vulnerable to POODLE (TLS) - Vulnerable to DROWN - Vulnerable to Ticketbleed - Vulnerable to ROBOT - Supports SSLv2 - Supports anonymous suites - Only supports RC4 suites - Supports insecure renegotiation - No support for TLS - Supports insecure cipher suites
Issues capping grade to T: Untrusted certificate
Issues capping grade to C: Vulnerable to POODLE (SSLv3) - Lacks support for TLSv1.2 - Uses RC4 with modern protocols - Uses 3DES with modern protocols
Issues capping grade to B: Supports RC4 - Supports SSLv3 - Uses weak DH - Has incomplete chain - Has weak private key - Lacks forward secrecy - Lacks support for AEAD cipher suites
Issues capping grade to A-: Lacks secure renegotiation

HTTPS Watch - NSDL